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JL^RrHl 3tHr iflHfla^HM^ ^(Bilinear Di f f ie-Hel lman 

Problem)* °] -g-*r ^ ^TiHfUU (Fingerprinting) ^rtr 

o§^Al ^oiq- Zlf-^i oil 7ltiV# ^Jl 7]^ ^7^^ 7l^^r ZL ^ 

£ 2 
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1 X Q200300 17022 #^ 2003/6/5 

{ANONYMOUS FINGERPRINTING SCHEME BASED ON THE BILINEAR PAIRINGS DIFFIE-HELLMAN 
PROBLEM} 

£ 3b-cr 5. 2S] ^d1]x>7> ^nfl^s. s^eq 

5. 3ctt £ 2£] ^v]\7.}9± *)^<^ ^H] Jr-g-^, 

100 : ^P-Dfl^V 200 : ^fl*} 

300 : €^ ^lS]7l^r 

^ ^ »llit y o v ^l*>7l 7l#ofl ^ ^jo £i s.§] > ^-(Bilinear 
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Pairings)^- °l-g-*H Jl-§-^^1 ^ 7^^ (fingerprint ing) 7l«^ *fl^- 

*}^*\] 3^*r v|lE^j3.A c Voi]A^ tl^-^ §-^(Diffie-Hellman problem)» 

<12> OH- <fl*fl f rq^^ C-HojEi^ T^^o} 7l#^ II tij-^o. 4 

(Water-marking) oflJL # ^ &£|-. 

<13> ^p}^ 7]^^ ^ ^-A> ^ ^o.^ tfloj OJ^ , t^^^ 7.fl 

^jEl^ 71^^- ^nfl7>7> 7>A]^ ^^*>J7 ( ^ *| O.S. -°- 

X€ A>^.0.^«.E-1 1-^ ^nfl^ ^ Hfll^t ^ ^Tfl *>TT 7]# 

<14> ^TlH^^ 7)^^ ^ §>i4^ tfl^ (symmetric) 

€^ 71^0]^, cj-s. ^.q.- «1 rfl^l^ (asymmetric) ^TjHfl^ ^olcf. 
<is> tfl^^ ^§7^^ 7l^^r l-e^l#s1(Blakley), (Meadows) ^ ^(Purely) 

ofl oi^flA-1 ^oj-sioi tivil(Boneh)^- A(ShawHl ^<fl^ ^^r^, «lcfl3)3 

7)^^r ^^(PfitzmannH afl^sjaL ^^^^cf. 

<16>' tfl^jtg ^71 = ^^ 7l*HH^ Aj-ojol ^(fingerprint)^ 2^ JHrtr ^iL# # 

oj^- a>^ ! Hjtfl^ ag^S.^ 7l*HH^r ^M^r ^M*} A>oloi cfl^j.^ Hi 
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f 

1020030017022 #^ 2003/6/5 

<17> ^ #og,g ^l^-ol 7 floi^- ^^*>7l ^ S-fr* ^13. ^ 5^4^ ^Hl 

¥^Sl*l ^137>, ^1 ^15171^ ^^-Al^ ^ tfl^ 71^4 cflWl^Cf. 

<18> ZLE^, Aj-^ - 71^^, «^7l- ^nfl^ ^^7} ^ Tfl ^f#€ 4 1 

nfl*}^ ^Lnfl ^ofl tfl*V ^^7> ^r#^ ^ aa— ^ , ol^Tfl ±f#^ 

<19> oje^V ^fl^^l-71 ^tb ^^S., "^(Anonymous) «HM ^7^^^ 

^ 7l^(ole> ; qit^ ^^^^^ 7l^o]^- ^lf-)o] ^^af 4°1 = (Waidner HI ^«fl 
^I^aI^, °1^- tflsH <3*1^ f^°m 71^-i; ol^-tl- 4^ o]^ ^ 

<20> ZieiM-, °1 ^ tl- 7]$ 7l^#^ cflJf-g-^ ^nH^J-o] <£a> ^ejcq t^}^ J7^^ 

&&4. ^, -f^tl" ^^l^r 71$ 7l^^l ^-g-ol 7>^W, ^nfl 

<21> S§] > 71$ 7l^*olH *IH€ 4£tb 71^1 £L7l^r ^-g-^ ^-g-* ^B^Tfl 

317171- 

<22> 44*1, -2.^ <£^°) Jl#3°-S. ^r^SlJl, ^-*1 71^1 3.71 ^<HH ^-g-^o.^. 
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<23> ^ ^,g. ^pj-ofl o^^fl ^V#*V ^^.5., wfllRKWeil pairingsHM" 3HB 

(Tate)« ^ ^W^: ^ ^TiH^ 7l*Hl vilH^lH^ ^ ^ti 

<24> o] S] S.^^- ^^>7l tif^t!: ^HH ^-H^, ^lS]7l^l^ 

Aj^Efl nfl 7 fl^^l- ^^^>J1 Z}" 7fl^l^ ^7fl7l^ til^^ll- ^*Rr ^^14; ^7fl7l2}- 
«m7l# o}^}^ ^nfl^ c^Kg. ^ <yo} ^nfl^ 3^5. A] S] 71^1 f^}^ # 
TflSf; ^r^7>^ ^iHH ^Pfl^l- <^<5Hr ^Tjl^; ^7}-^ cj-ilhg- 
**fl ^<«<4 <yo| ^- D fl^ ^O-S. #<y*Rr ^-^4; #*fl7># ^iHH 1- 



^£^1, ^nfl^Xioo), ^^^(200) ^ -tl5l7l^(300)^r i^W. Q ] , ^-nfl 
7>(100), ^r^7.>(200), ^1^71^(300)^- #<^7l-# ^l^v}, ^7}^ ofl 
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1020030017022 ^ QA- 2003/6/5 

<27> V\9\- ^ol, X\ 5) 7] #(300)£r Zj" #^*>7} A}-g-^- ^ ^ A^efl n^fl 

£^T«- ^ ^ Zj- ^^>SJ ^"7117121- ^ A 3*H 

<28> A]5-l7l^;(300)^r ^fl*Kl00)7} #*fl *K200) <*fl 7fl *R1* ^\ 

-8-3 $1^*1* ^D^Ki00)^7fl llr^H, jM*>(200)7> ^ ^*|-& # 

<29> ^Ln]]7>(100)^ ^!Sl7]^(300) O-S-^Ei *fl^-£|^ A^Efl nflyfltfl^oll trj-S- ^-7fl7]^ 

Wl^7l# AV-g-*>^ AlSl7l^;(300)<Hl ^nfl7> ^JiCofl^rfl, A]^ ^Ji , *1 

51 71 ^(300)^.3.^-^1 ^3Zf 7.>Al^ ojt^ ^ 7 fl 7 | - A|-g-^ $Nfl*K200)sH*| ol 

<30> ^fl^OO)^ ^*cH a)*fl ^Dfl^>(100)7> ^nfl7>o] ^0.3. 

^lWUOO)^ ^M(200)2f cflSj-^i HS^-i- ^-Sfl 7^1 ^1 ^tj 

<3i> ^M*K200)fe ^nfl;*K 100)7> *]^*}7l ^*fl *lH*Kr 

«: ^H^Kl^l-I- ^fl7}( 100)2} f^lS ^^Hl ^s^t}. 

<32> olEltb *l-g- ^ ^-S^-Ei 1-^ ^nfl7># ^#*V ^-f , ^#*V ^J±«- o] -g.«} 

^ ^15171^(300)^1 ^P-nfl^oJ^. ^ &C}. 

£ 2^1 Jl#5M- 4M1*1 ^^*>7ls *h=}. 
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<34> 4^^-, u^fl^, ^nfl^>(100)^ ^-7fl7l 55 Hi ^71 #711 

(S202)£h ^-nfl^doo)^ ^^71^(300)^ ^ ^7fl(S204)sq-, ^fl^>(200)^l ^ 

^"WUOO) 91^ #7ti(S206)sh ^MUOO)^ ^rnfl^X 2 oo)^Sl #7*1 
(S208)^-, ^11^(200)^- ^5) 71^(300)^51 ^ ^flx} ^ #7)1 (S2 10) ^S\7}^ 
(300 H #iM(200)7} ^*Kr ^ 3^ ^-^Kr #7ll(S212)l- S^-W. 

<35> £ 2 ofl £AltV tiV^- ^-ol ( Al^^ n)l 7 fl>&^ #7fl(S202)^ ( ^ nfl 7>( 100 ) 2}- ^ 

*M(200) S.^7> ^-fj-*Rr Al^Efl n)l7ll^#ol ^15171^(300)^1 ^ ^7fl 

5]^ ^^.5.^, Ol aZ^c^ <y<^ £^ G 2 (°H, Gi^ G 2 ^ S^f- m)7> 

<36> Gl , g 2 7> ^^si^, Gi^ <a^^ pi- ^^^>ji, ^7i 

<37> 1] 
<38> eiG.XG^Gj 

<39> ^ ^-^oUA-] Gl ^r t^^^H, G 2 ^ Z m *^ ^ ^ ^ 

71^(300)^: ^nflAKlOO)^ Hl^^lS G 2 °l] ^r*Rr °d ^ VH 1 * Si, S 2 , S 3 « 
Wl ^715. ii^*V *M [^-±1 2]!- A}-g-*H ^nflAV(lOO)^ ^7fl 7l# 7^1^^-. 

<40> 2] 

<41> yB=eCPJ>y™ 

< 42 > n ^ Dfl ^ 21-^(5204)^, £ 3a°H £aRV 
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<43> n}^, ^^l(S302)^Ai^ ( a] s] 7] ^-(300)^1 -^7fltb *1^ °fl7fl^^# wf%-o.S G 2 

ofl oj^cq ^ X(r g. t}7] 3]^1 7\)*V& &^g- ^n]]^>(100) 

<44> 3] 
<45> T r = Xr P 

<46> O^, ^^(S304)^^ ^.ufl7>(100)^ til ^711- A}-g-^}<*| §>7l 4] 

3 71*1(300 HI ^^*lt+. 

<47> 4] 

<48> JT-s,^ 

<49> 5] 

<50> Y=s lS ^J>+T R 

<51> o]^ ^- 7 fl 7 ] X ,Y7> 71 ^(300)^1 ^51^, ^l5l7]^-(300)^ #t)1(S306:HH 

<4 £o] f>}7) 6] o. ^ oitg ^ 7fl 7lol ^^-g- 

<52> [^*H1 6] 

<53> e(JT,P)=^ • e (P,r^> 

<54> A] Si 71 ^(300)^1 ^1*11 ^^l ^^51^, ^I5l7m(300)^r *>7l 7]^ ^ 

*fl T TflAj-t!- ^, Cert(T), Cert(Y I x R )-8: ^nfl^KlOOHl »1 

<55> 7] 
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<56> T=e(X,T R ) 

<57> ^nfl^>(100)7> ^Sl7l^r(300)^-S^fEi «1 0_i£ , ^^(lOO)^ # Tfl ( S308 ) 

<58> n rf-g-, ^rnfl^>(200)7> ^-nfl7}(100)-I- ^sKr -4^(S206)£: S 3b^l 

<59> #7fl(S402HH^r 7-*\\x}(100)7} ^:nfl^>( 200)^711 Y, [T, Cert(T)], ^fl^ 

i± text* . 

<60> ZL^JL, ^nfl^>(l00)^ ^r^(S404)<^]^^- ^o] Gs^l ^r}^ H+^r k«- ^ 

# *>7l 8]-g- textofl cfl*V Mth}. 

<6i> 8] 

<62> sig=Sign Qtext,s u s 2 ,s 3 ,x R ,k) 

<63> o^, ^nfl^>(200)^ #3l(S406)^ Cert(T)# ^^>ZL, ^ ^ 

^ [T, Cert(T)]S 

<64> cf-g., ^ pfl ^(100)^- ^fl7}(200)#^ -4^(S208)£- S. 3c°fl S^ltb 

ojnfl, ol^*V *]^- Aj-<y s].^ 27} # <£ ^-(two-party computation) 7l^^ 

<65> ^-^(S502)^^i2f ^nfl^(ioo)7> x R , sig, si, s 2 , Cert(Y I x R )-§- # 

°fl7}(200Hl7fl ^H^, ^fl7}(200)Tr #31(5504)5. T, Y, text, em# ^fl 

7>(100)<H1t11 ^H^t}. 
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<66> oje^ $6)] 7}*}*}ol ^nfl^>(100)^ *}7) 9]1- ^ valrg- # 

*fl*K200H]7ti ^H^4(S506). 

<6?> 9] 

<68> va l \ = Verijy ^(jext,sig,Y) 

< 69 > ^nfl^l-(lOO)^ f>}7] [^r«H4 10]* -g-*fl val 2 » ^M*K200H Tfl 

^1^1?!:4(S508). 
<70> [*r*H 10] 

<71> va/ 2 =Ferij5, 2 (y,Cerr(r | ^),5,^ 2 ,^,r) 

<72> o] * ; ^rDfl^>(200)^ ^7fl(S510)5- €rH *>7l 11] 5]- ^ emb 3b8: ^ 

<73> [^SV^] 11] 

<74> emb=text | | f | Cerr<T | x^) | | .s 2 | x R \ T 

<7 5> =L^]JL, ojs^t!: emb &-§- *}7] 12H ^^^H ^ ^iL em*«- Tfl 

^*ll*Kl00Hl7fi ^^^cf. 

<76> 12] 

=Fing(em y emb) 

<78> ZL cf^, ^fl*}(200)£}- ^1^1 7] ^(300)^>S] ^ ^nfl*} 3^(S210)£- £ 3d 

<79> o}^, ^-7fl(S602)ofl^ ^n]]^>(200)^, ^ ^7fl7] Y« A>-g-§>^ ^-u)]^^. t ext°l] 

tfltl: sigl- 
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<so> x R -8r [*r*HI 5]^ [^r«M 7]°fl 3*IM T) YSH- ^, x R ^ 

^7fl7l YS] i^-^>7V T2] =±H^-7>5]- ££--8: ^*RrCfl, ^1S) 71^(300)^01 ^nfl^(ioo) 
°fl >41 [*r*H 734 ^r>7l [^«H 13] ol ^o. ^^S. ^ XR ^. ^)^7l nfl 

<81> [<^*H1 13] 

<82> T=e(s x sJ>jCj]P) 

<83> o]^., #*fl*K200)ir ^(S604)«^|a-1«4 ^-o], ^>7] [^«H] 14]!- ^§>fe ^7fl7l 

2] i-fi-*}* ^A>tbCf. 

<84> [^r*H 14] 

<85> e( Y,F)=y B • « (PJpf* 

<86> #7ll(S604HH<>] [^*vai u]* ^*Rr ^15] 71^(300)* 

^°fl^» ^iws. ^ 5a^(S606). 
-fr^i^-H ^Ji^n ##smi -a-«a« ^ sa^, ^n*Rr 

<88> £ ^ ^4 ^ ^^o] 3«£o^i=. AJ- 

JL3j*H 71 371 « ^^1 o^aJ-o} Jl^* ^cfl^l^cf. ole^ 7 1 3713] 
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^ 7l^ol!4 tijcfl^l ^T^^ 7^ Sfl^ 3£n> 0>u|^- ( ^^Kg- ^>-§-^> 

oi> 3^ Eflois ^-oiq. ^Kg- eHI^ 

3€ ^ ^M-, ^7fl ^^^-^ *1^3 0 J ^^s. «?1«H 7fl^doi ^§oi 

ol^^jT olo.^ ( 2j ? o,]H 7il<4-^* #o]^ oj-^^o} o^ofl igo^ EflolE fo^ 
<92> o]^- ; ^- ^tg-g. ^aHH 5-71 ^>o^ ^t112|o S ^^^^m, t^^r °l^tb 
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[^T 1 * 13 

#*fl ^^Rr ^ (Fingerprinting) «J°?H1 5£°H , 

#71 ^S}7l^-g- J§-*i\ #7l ^nfl*} g ^:^x>S *-fr*Hr 
^^G^G,^^ X\^% nfl 7 fl^(Gi, G 2 , m, P, e : #7l fl^, #7l 

Gi^r #7} mS] Ef^^^, #71 G 2 ^ #71 m^l ^ #71 P^r #7l Gi^ 

#71 ^Sl7l^* *^fl #71 G 2 ofl ^}^r \+^r» #71 ^fl* r 3 «1 

^7l( Sl ,S2,S 3 )S ^^tT #71 ^fl*V^ ^-7fl7l(^ = < jP ' P > W3 )l- 7fl#^ *fl 2 # 

31 3-; 

#7l #Sl7l^ ^fl ^7fl^ Al^Efl Hi] 7fl^^, «1 ^ ^1 5? ^7^11 B>^O.S. # 
71 ^fl*}^ #71 ^Sl7m?i5l 3SL# ^j-*}*f *|| 3 ^7^1^; 

#71 ^nfl*}^ ^if H>^-O.S. #71 ^^} 7 } #71 ^Dfl7>l- °]#<5Kr *fl 4 #7)1 

#71 ^nfl^-sj- # 7 ] aa-nfl^ #Jl #^s>^ X| 5 ^^lsq-; 

#71 #S|7l^ *Sfl ^l^Efl nfl 7 fl^ f 01^71, ^7fl7l #7l #nfl 

*>« *«fl #71 ^n||*H ti>#-^S #71 3&nfl^ #7l ^1^71^ 

^1 *D £ *^ ^"fl^m #1<s}^ xi 6 #7il<4; 
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1020030017022 #^ 2003/6/5 

» i^}^ i4|H$|3#<*IMsJ c^-^ ^-XKBilinear Di f f ie-Hel lman 

Problem)!- °l-g-*V *)x$ ^ . 

[^T 1 * 2] 

*n i -m 5a<H>H, 

#7] XI 3 #3)fe, 

#71 ^SM^ol #71 G 2 ^l ^Srfe YHKxr)* 3l#^ 

^( r ^ =x ^)* #7i ^fl*H)7fl &&*\^ 

#71 ^nfl*> 7 > #7] Hm^ll- A>-g.*H 3l#€ ^ ^7fl7l 3K^ =W , 

#71 #Sl7l^;Oll^ XI 1 °l-g-*H #71 °] ^ ^ 7 fl^ 

(X,Y)sl ^^-S- ^#*>^ #7)1^; 

#71 ^13171^1 ^*fl ^"71 ^7lMS] ^£1^, #7l AjS^l 

XI 2 ^^K^^' 7 * 3 )* X1#H> * ^^(Cert(T), Cert(Y I x R ))» 
#71 ^ufl^HlTll *l^Rr ^-Xl^; 

#71 ^-nfl^l- ^71 XI 2 ^^( r=e ^^))^- ^«fl ^^S>J7 a o V 7 1 

(x R ), #7l XI 2 3^(T), #71 <^ ^7fl7l(Y)» Ji^SRr #741 S. ^^lfe 3* 
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1020030017022 2003/6/5 
33 

*fl 1 ^ 3L±r *i| 2 XW*!, 
#7l X) 4 ^Tflfe, 

-8-71 ^fl^HH #71 ^nfl^VS. #7l <^ ^7fl 7) (Y), #7l ^11 2 ^^(T), #7l 

$]^*KCert(T)), ^nfl^ji(text)* #4^H= ^l^; 

#7l ^Dfl^Hl^l #7l Cfcoll ^*Rr V+^r k» #7l ^D))^i 

(text HI ^ A^(^ =s ^( to ^.. J ^3^.*))|. ^#*Rr ^1^; 

-8-71 JM*HH a o v 7] o]^(Cert(T))» 3^>^, ^€ 3-f #7l T, 

#7l $1^*1 (Cert (T))» *)#*rfe- #31 5. 3* ^8-2.3. *}tt ^B-£lH#<*ll 

43 

1 # SL^ afl 2 ^-^1 5U°H, 
#7l all 5 #7fe, 

#7l ^7}7\ YhrCxR, si, s 2 ), ^(sig), #71 <?l^UCert(Y I x R ))« #7l # 
0 fl*Hl7fl ##*Kr ^7112}; 

#71 %^} 7 } # 7 j oi^ *7fl?l(Y), #71 all 2 3^(T), ^H^iKtext), afl# 
^S-(em)* #71 ^-ull^HlTil al^}^ #7fl2]-; 

#7l ^7}7} vali=Verifyi(text, sig, Y) ^ val 2 =Verify 2 (Y,Cert(Y I x R ), si, 
S 2 , X R> T)* 7^1#§>^ #71 ^nfl^Tn 3^*Rr ^T^; 
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#7l &vm7\ ^l^^i(emb=text I sig I Y I Cert(Y I x R ) I si I s 2 I x R I T) ^ 
o] ^*<m(em*=Fing(em, emb))-fr ^#*H #7l fDfl^Tll #^Hf #7^3. 

53 

#7l ^1 5 #31^ 27\7} <3#( two-party computation) 7}^o\] ^*fl 3^8: 
^ 1 SE^r 4 2 %H1 &<>H, 

#71 ^nll^} 7 > #71 *7fl7l(Y)« A>-8-*M ^ufl >g iL( t ext HI tfl ^ ^(sig) 

#7l ^nfl^> 7 > ^^(^CW^-eCP^o. n>^^ -^fl?^ ^-^7># ^ ^ 

ofl7>s #^*Kr #31 s oi^-oi^i^ ^-t- ^ ^ MiH^a.#^Misi ^ 

g-^-g. ol-g-^j- ol^ ^7^^ « 0 >^. 
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[-£ 1] 



300 




100 200 
[S. 2] 



(311 ) 









— S202 










— S204 










— S206 










— S208 










— S210 










— S212 









C£ED 
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3a] 



( 14 ) 



CUD 













X=sis 2 P,Y =SiS 2 s 3 P+Tr ?f)-tt 
X.Y» -ti^M**! 






e(Y,P)=y B -e(P,T R )^^ 
T=e(X,TR 
tl-f-M Certm.CertCYlxR)^^ 






T=e(X,T R )3^ 
xr.T.Y 







— S302 



-S304 



— S306 



— S308 



2003/6/5 



3b] 



CZLg ) 







Y^T.CertCmterf?!* j 






sig=Sign(text,Si,s 2 ,x Rf k)>fl^ 






Cert(T) 3^ 
[T,Cert(T)]7l^ 







— S404 



— S406 
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3c] 
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( *1 4 ) 







^^x} x R ,sig,Si,s 2 , 
Cert(Ylx R )^* 






aM^K 7 !- T,Y,text,em 






vali = Verify i (sig.text.Y) 






val 2 =Verify 2 (Y.Cert(Y 1 x R ). 
Si.s 2 ,xr,)*KJ*H ***M* 3* 






emb=text| sig 
IsJ s 2 |x, 
em* =Fing( 


Y|Cert(Y|x R ) 
em,emb)f- 







— S502 



-S504 



-S506 



— S508 



— S510 



IS. 3d] 



C£KD 







texH tflliM^ sig 3^ 






e(Y,P)=y B - 















— S604 
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